The question is usually answered with a number: from fifty employees, from five million in revenue, from the second branch. Such thresholds sound practical, but they are regularly misleading. A craft business with eighty employees and three standard contracts has less legal need than a software provider with twelve people, international customers, and its own product.
Events are more meaningful. Every company goes through points where a new legal need arises, usually without anyone mentioning it. Those who know these points can answer the question about the right time without discussing metrics.
clience.legal is a digital business law firm for entrepreneurs. We support companies as external legal department of clience.legal and regularly see which events trigger the need and which errors arise during this phase. This article describes six triggers, the corresponding legal requirements, and the effort that can be expected.
The most important information at a glance
- Events beat the metrics: The need arises from concrete growth steps, not from revenue or employee limits.
- Six triggers: first hires, first foreign customer, financing or change of shareholders, first tender, own product and first major dispute.
- Individual thresholds are triggered automatically: Data protection officer from twenty persons involved in automated processing, internal reporting office from fifty employees.
- The timing determines the costs: Before signing, any clause can be negotiated; after that, it’s just a matter of limiting damages.
- Two to three triggers at the same time: From that point, ongoing support regularly pays off; before that, individual engagements are sufficient.
- The entry is manageable: A structured contractual basis is created in a few days and then lasts for years.
Why sales and employee figures do not tell much
Legal need arises where agreements are concluded and where obligations are tied to specific statutory requirements. Both correlate only weakly with company size.
An operation with high revenue and few long-standing customers works with a stable contractual situation and rarely needs advice. A smaller company with many new customers, changing projects and individual agreements, on the other hand, generates legal questions continuously. What matters is the number of contracts concluded, how individual they are and the speed with which the framework conditions change.
In addition, there is the regulatory density of the industry. Anyone who works with health data, operates in the financial sector, or markets products has a fundamental need, regardless of size, that a trading business does not have in this form.
Three questions that make the need visible
Before we get to the triggers, a brief self-reflection helps. Three questions provide a more reliable assessment of actual needs than any metric.
First of all: How many hours per month do management and specialist departments spend on contract issues, research, and follow-up questions? This time does not appear in any cost item, but is the most expensive in the company. In many medium-sized businesses, it amounts to between ten and thirty hours per month.
Secondly: How often is a contract signed without anyone having read it in its entirety? The honest answer is rarely zero. Each of these cases is an assumed risk the extent of which no one knows.
Thirdly: How quickly could you say which contracts will expire or be renewed in the next three months? If the answer takes more than an hour to work out, there is no overview, and unintended extensions are only a matter of time.
The six triggers in detail
The first hires
The first employment contract creates a permanent need for rules. Reliable contract templates are required, as well as a written statement of the essential terms of employment, rules on working hours, vacation and probation periods, and a process for terminations and employment references. In addition, working time must be recorded and occupational safety instruction provided.
The typical mistake is using a free template that does not fit the business. Invalid fixed-term clauses and unclear rules on overtime and variable compensation become particularly costly. The effort required for a clean foundation is one to two days, and it can be reused for years afterwards.
The first foreign customer
With business abroad come questions that play no role domestically: applicable law, place of jurisdiction or arbitration clause, terms of delivery, currency and payment security, and tax treatment. Data protection also changes as soon as data is processed outside the European Union. The most common mistake is tacitly accepting the customer’s terms because the order is important. For more on this, see our article on Contract drafting in international business.
Financing or change of shareholders
As soon as an investor comes in, a shareholder leaves, or shares are issued to employees, the articles of association become the decisive document. Matters to be clarified include voting rights, approval requirements, information rights, provisions for the event of departure, and the valuation of shares. Mistakes at this stage have effects for years and can only be corrected later with the consent of all parties involved, which is then rarely obtainable. On the role of management in this process, see our overview of personal liability in GmbH and UG.
The first tender or the first large customer
Large clients vet their suppliers. They regularly require evidence of data protection compliance, information on subcontractors, declarations on compliance and whistleblower protection, and commitments on information security. Those who do not have these documents ready are eliminated before price is even discussed. At the same time, extensive framework agreements are presented whose liability and contractual penalty provisions often go far beyond what is customary. The need here is twofold: preparing the evidence and negotiating the contract. More on this under Compliance and managing director liability.
Your own product
As soon as a service becomes a product, the legal situation changes fundamentally. Rights of use, license model, limitation of liability, warranty, support, and the handling of further developments must be regulated. In the case of software, there are questions about third-party components used and their license terms; in the case of brands, the protection of one’s own trademarks. Anyone who sells the product without this foundation is selling promises whose scope no one knows. We lay the groundwork for this in our Drafting of contracts and T&Cs.
The transition from a project-based business to a permanent one
A trigger that is rarely named arises when individual contracts transition to recurring services. Maintenance contracts, subscriptions, framework agreements, and service agreements follow a different logic than the individual project. Considerations include duration and renewal, price adjustment, performance changes during the term, availability commitments, and termination, including the question of what happens to data and access.
The typical mistake is simply adding a term clause to the project contract. That leaves out exactly the provisions needed in a long-term relationship, such as adjustment to changing costs. Anyone who wants to build recurring revenue should change the contractual basis beforehand. We explain when a review in the individual case makes sense under contract review by an attorney.
The first major dispute
It is not a trigger in the actual sense, but the price paid for a missed one. It is still valuable, however, because it shows which provision was lacking. Therefore, every dispute should be followed by a brief evaluation: Which clause would have changed the course of events, and in how many ongoing contracts is it also missing?
It is striking that these seven triggers almost never occur individually. Whoever wins the first foreign customer usually also hires staff, and whoever builds their own product soon negotiates with larger customers. The events fall into a growth phase in which leadership capacity is already scarce. That is precisely why the legal side remains untouched, even though it has the most impact during this phase. Those who know this can counter it and create the foundations before the next step takes place.
Thresholds that apply regardless
- Twenty people with automated data processing: A data protection officer must be appointed starting from this number.
- Fifty employees: From this threshold, an internal reporting office must be established and operated in accordance with the Whistleblower Protection Act (HinSchG).
- Change of legal form to a GmbH: This creates obligations regarding annual financial statements, disclosure, shareholder resolutions and early crisis detection.
- More than 800,000 euros in sales last year: From January 1, 2027, the obligation to issue domestic invoices electronically to businesses will be in place.
These thresholds are often crossed unnoticed during growth because they are tied to figures that no one is watching with them in mind. An annual check is enough to keep them in view.
The simple self-check
Count how many of the following statements apply to your company.
- We sign several contracts every month, the content of which varies.
- Customers regularly present us with their own conditions.
- We have employees or freelancers.
- We work with customers or suppliers outside of Germany.
- We process personal data to a significant extent.
- We offer our own product, brand or software.
- In the last three years, there has been at least one serious conflict.
- Legal questions regularly end up with management.
With up to two that apply, an individual engagement is sufficient, supplemented by a one-time review of the fundamentals. With three to five, ongoing support on a small scale is worthwhile. From six on, the need is so regular that engaging counsel case by case becomes more expensive than a fixed arrangement. We describe typical scenarios under Advantages of an external legal department for medium-sized companies.
Do not view the score as an exact measurement, but as a basis for discussion. Two companies with the same score may have different needs, depending on how individual the contracts are and how highly regulated the industry is. The last statement is particularly telling: if legal questions regularly end up with management, the need exists regardless of all other criteria.
What happens if you start too late
The disadvantage rarely shows immediately. It builds up as a legacy: contracts with inconsistent provisions, commitments that no one can keep track of anymore, and documentation that is missing when needed.
This becomes noticeable at three points: in a tender, when evidence is not available at short notice; in a dispute, when your own contract does not govern the decisive question; and in a sale or succession, when the due diligence review triggers price reductions or warranties. Cleaning this up then costs many times what ongoing maintenance would have cost. We describe how the value of preparation shows in day-to-day business under more than just legal advice.
The pragmatic approach
Those who have recognized the need do not have to agree on ongoing support right away. A phased approach in three steps has proven effective.
- Taking stock: Review once which contracts and terms are in use, which versions are circulating and which obligations already apply to the company. The result is a priority list, not an invoice for an ongoing retainer.
- Lay the foundation: Review the three to five most important documents, usually terms and conditions for the core business, employment contract templates, and agreements with data processing service providers.
- Establish an ongoing relationship: Only then should a decision be made whether ongoing support is advisable. At this point, the need can be realistically assessed, because the initial situation is known.
This approach avoids two typical mistakes: committing too early to a flat fee that is not used up, and starting too late, when the setup has to happen under time pressure. We describe what the subsequent collaboration looks like under more than just legal advice.
Related: External legal department: when it pays off and External legal department, in-house counsel or individual engagement.
Tell us your industry, the number of employees, the typical types of contracts and the triggers coming up for you in the next twelve months. We will tell you what needs result from this, what must be addressed immediately and whether ongoing support makes sense. To do so, schedule an free initial consultation of 15 to 20 minutes. The professional framework is provided by our business law advice.
FAQs
At what employee headcount does a company need legal support?
There is no fixed number because the need depends on contract density and regulation rather than size. More meaningful are events such as the first hires, the first foreign client, a funding round, or participation in tenders. If two or three of these coincide, a regular need arises. However, individual obligations are tied to fixed thresholds, such as the internal reporting office from fifty employees.
Isn't a tax advisor enough in the beginning?
The tax advisor covers bookkeeping, annual financial statements and tax matters, but may not provide comprehensive legal advice. Contracts, corporate law, employment law and data protection are not part of their remit. In practice, the two advisors work well together, especially on shareholder matters and in crisis situations. One cannot replace the other.
Which contracts should a growing company prioritize first?
It makes sense to proceed in order of frequency and risk. First, the terms for the core business, i.e., quotation, order confirmation and general terms and conditions. Then the employment contracts and agreements with freelancers. Next, the contracts with service providers who have access to data. Only then do special topics such as license or cooperation agreements follow.
What does it cost to start receiving ongoing support?
Costs depend on size, industry and scope of support. Common models are a monthly flat fee, a pool of hours to draw on, or fixed prices for clearly defined projects. With us, the initial consultation is free, and the scope is agreed in advance. The evaluation should be based not on the hourly rate but on a comparison with internal time costs and the costs of avoidable conflicts.
When do I need a data protection officer?
If, as a rule, at least twenty people are constantly engaged in the automated processing of personal data. Irrespective of this, the obligation may arise from the type of processing, for example in the case of extensive processing of special categories of data. The role can be filled internally or outsourced. Responsibility for compliance remains with the company.
When do I need an internal reporting office?
From fifty employees, the Whistleblower Protection Act (HinSchG) requires an internal reporting office. It must receive reports confidentially, acknowledge receipt, take follow-up action and document its work. The task can be assigned internally or outsourced to an external third party. Typical mistakes occur less during setup than in ongoing operation, particularly regarding deadlines and the protection of the whistleblower.
What changes will there be when switching to a GmbH?
With a GmbH come obligations regarding annual financial statements and disclosure, shareholder resolutions and ongoing early crisis detection. Management is also subject to the duty of care under § 43 GmbHG, with personal liability in the event of a breach. The articles of association also gain importance because they govern voting rights, departure and succession. These points should be considered at incorporation, not only once a dispute arises.
Is legal advice worthwhile even without an acute problem?
Especially then. Before signing, any clause is negotiable and any risk can be shifted. After that, it’s only about limiting damages. The economic benefit therefore arises predominantly in conflicts that never even occur. Additionally, an orderly contractual situation improves one’s position in tenders and when selling later on.
How long does it take to get the basics in order?
For a medium-sized company, a few days are realistic, spread over inventory assessment, prioritization, and implementation. It becomes more complex when different versions were circulating over the years and commitments were made only verbally. After that, only maintenance work remains. The onboarding can be easily scheduled during quieter periods of the business year.
When is an attorney worthwhile for a growing company?
As soon as a growth step is coming up that requires new agreements. We assess what needs result from it, create foundations you can use long term, and support the negotiation when a contracting party presents its own terms. Early timing is crucial because mistakes from this phase carry over into the existing contracts and can later only be corrected with the consent of all parties involved.
